Alexey Lednyov 880b10cce1 att&ck tags review: windows/process_creation part 1, network

2020-08-27 20:43:47 +03:00

..

cisco/aaa

fix: rules with duplicate tags

2020-07-27 11:44:47 +02:00

zeek

Zeek RDP rule

2020-08-23 13:16:42 -04:00

net_apt_equationgroup_c2.yml

refactor: moved rues from 'apt' folder in respective folders

2020-02-01 17:59:26 +01:00

net_dns_c2_detection.yml

att&ck tags review: windows/process_creation part 1, network

2020-08-27 20:43:47 +03:00

net_high_dns_bytes_out.yml

att&ck tags review: windows/process_creation part 1, network

2020-08-27 20:43:47 +03:00

net_high_dns_requests_rate.yml

att&ck tags review: windows/process_creation part 1, network

2020-08-27 20:43:47 +03:00

net_high_null_records_requests_rate.yml

att&ck tags review: windows/process_creation part 1, network

2020-08-27 20:43:47 +03:00

net_high_txt_records_requests_rate.yml

att&ck tags review: windows/process_creation part 1, network

2020-08-27 20:43:47 +03:00

net_mal_dns_cobaltstrike.yml

att&ck tags review: windows/process_creation part 1, network

2020-08-27 20:43:47 +03:00

net_susp_dns_b64_queries.yml

att&ck tags review: windows/process_creation part 1, network

2020-08-27 20:43:47 +03:00

net_susp_dns_txt_exec_strings.yml

att&ck tags review: windows/process_creation part 1, network

2020-08-27 20:43:47 +03:00

net_susp_network_scan.yml

att&ck tags review: windows/process_creation part 1, network

2020-08-27 20:43:47 +03:00

net_susp_telegram_api.yml

att&ck tags review: windows/process_creation part 1, network

2020-08-27 20:43:47 +03:00